CVE-2010-4801

概要

参考情報

• packetstormsecurity.org/1010-exploits/baconmap10-lfi.txt · Exploit
• secunia.com/advisories/41749 · Vendor Advisory
• securityreason.com/securityalert/8229
• exploit-db.com/exploits/15234 · Exploit
• johnleitch.net/Vulnerabilities/BaconMap.1.0.Local.File.Inclusion/50 · Exploit
• securityfocus.com/bid/43908 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/62390

baconmap のその他の脆弱性

• CVE-2010-4800高 7.5SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute arbitrary SQL commands via the type parameter.